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DETAILED ACTION 

The instant application 10/573,684 is presented for examination by the examiner. 
Claims 21 , 28, and 29 are pending. Claims 18-20, 22-27, and 30-39 have been 
canceled. 

EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Mark Pratt on 7/21/10. 

Claims 28 and 29 have been replaced as follows: 

28 . The communication device of claim 2 1 , wherein 

a base element and the public key of the other device are defined in a group, the public 
key of the other device having been calculated by performing a power operation using the private 
key of the other device and the base element, 

said data generation unit of the communication device divides the operation result 
obtained by applying the one-way operation to the first seed value which is a random number to 
generate the first coefficient and the first key, calculates a first element in the group by 
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performing a power operation using the first coefficient and the base element, calculates a second 
element in the group by performing a power operation using the first coefficient and the public 
key of the other device, calculates a first verification value by performing a logical operation 
using the first seed value, the first element, and the second element, and outputs the first element 
and the first verification value as the first encrypted key data, 

the other device acquires the first element and the first verification value as the first 
encrypted key data, calculates a third element in the group by performing a power operation 
using the private key of the other device and the first element, calculates a second verification 
value by performing the logical operation using the first verification value, the first element, and 
the third element, divides an operation result obtained by applying the one-way operation to the 
second verification value to generate a fourth efficient and a fourth key, compares an operation 
result of a power operation using the fourth coefficient and the base element, and the first 
element, and when the operation result and the first element match, recognizes the fourth key 
identical to the first key, 

the base element and the public key of the communication device are defined in the 
group, the public key of the communication device having been calculated by performing a 
power operation using the private key of the communication device and the base element, 

the other device divides the operation result obtained by applying the one-way operation 
to the second seed value which is a random number to generate the third coefficient and the third 
key, calculates a fourth element in the group by performing a power operation using the third 
coefficient and the base element, calculates a fifth element in the group by performing a power 
operation using the third coefficient and the public key of the communication device, calculates a 
third verification value by performing the logical operation using the second seed value, the 
fourth element, and the fifth element, and outputs the fourth element and the third verification 
value as the second encrypted key data, 

said decryption unit of the other device acquires the fourth element and the third 
verification value as the second encrypted key data, calculates a sixth element in the group by 
performing a power operation using the private key of the communication device and the fourth 
element, calculates a fourth verification value by performing the logical operation using the third 
verification value, the fourth element, and the sixth element, divides an operation result obtained 
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by applying the one-way operation to the fourth verification value to generate the second 
efficient and the second key, compares an operation result of a power operation using the second 
coefficient and the base element, and the fourth element, and when the operation result and the 
fourth element match, recognizes the second key identical to the third key. 

29. The communication device of claim 28, wherein 

when P is a base point as the base element on an elliptic curve E as the group, x is the 
private key of the other device, W=x*P is the public key of the other device, and "*" 
represents an operand indicating the power operation which is multiplication of a point on the 
elliptic curve E, 

said data generation unit of the communication device 

(a) generates the first seed value si which is a random number; 

(b) calculates a hash value G(si) of the first seed value si; 

(c) divides the hash value G(sj) to generate the first coefficient a and the first 

key; 

(d) calculates a point R = a*P as the first element and a point Q = a* W as the 
second element, on the elliptic curve E; 

(e) performs an exclusive OR using the first seed value si and a hash value 
obtained by applying a hash function to a result of concatenating the points R and Q to obtain 
the first verification value v; and 

(f) outputs the point R and the first verification value v as the first encrypted 

key data, 

the other device 

(g) acquires the point R and the first verification value v; 

(h) calculates point Q ' = x*R as the third element on the elliptic curve E; 

(i) performs an exclusive OR using the first verification value v and a hash 
value obtained by applying a hash function to a result of concatenating the points R and Q ', to 
obtain the second verification value s ' i\ 

(j) calculates a hash value G(s ' i) of the second verification value s ' i\ 
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(k) divides the hash value G(s ' i) to generate the fourth coefficient a ' and the 

fourth key; 

(1) judges whether R = a '* P is established or not; and 

(m) when judging that R = a '*P is established, recognizes the fourth key 

identical to the first key, and 

when P is the base point as the base element on the elliptic curve E as the group, x is 

the private key of the communication device, W = x*P is the public key of the communication 

device, 

the other device 

(a) generates the third seed value s 2 which is a random number; 

(b) calculates a hash value G(s 2 ) of the third seed value s 2 ; 

(c) divides the hash value G(s 2 ) to generate the third coefficient a and the third 

key; 

(d) calculates the point R = a*P as the fourth element and the point Q = a*W as 
the fifth element, on the elliptic curve E; 

(e) performs an exclusive OR using the third seed value s 2 and a hash value 
obtained by applying a hash function to a result of concatenating the points R and Q to obtain 
the third verification value v; and 

(f) outputs the point R and the third verification value v, 
the decryption unit of the communication device 

(g) acquires the point R and the third verification value v; 

(h) calculates the point Q ' = x*R as the sixth element on the elliptic curve E; 

(i) performs an exclusive OR using the third verification value v and a hash 
value obtained by applying a hash function to a result of concatenating the points R and Q ' to 
obtain the fourth verification value s ' 2 ; 

(j) calculates a hash value G(s ' 2 ) of the fourth verification value s ' 2 ; 

(k) divides the hash value G(s ' 2 ) to generate the second coefficient a ' and the 

second key; 

(1) judges whether R = a'*P is established or not; and 

(m) when judging that R = a'*P is established, recognizes the fourth key. 
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Response to Amendment 

The present claim amendments overcome the previous claim objections and 
rejections. 

Reasons for Allowance 

The following is an examiner's statement of reasons for allowance: 

The prior art is silent in explicitly teaching or rendering obvious independent 
claim 21 's limitation: "said data generation unit divides an operation result obtained by 
applying a one-way operation to a first seed value to generate a first coefficient and a 
first key, generates first encrypted key data by performing encryption using the first 
seed value and the first coefficient based on a public key of the other device, and 
transmits the first encrypted key data to the other device, said decryption unit receives, 
from the other device, the second encrypted key data, generates a second seed value 
from the second encrypted key data based on a private key of the communication 
device, divides an operation result obtained by applying the one-way operation to the 
second seed value to generate a second coefficient and a second key, checks the 
second encrypted key data using the second coefficient, and when the second 
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encrypted key data is correct, outputs the second key identical to a third key of the other 
device". 

Allowable Subject Matter 

Claims 21 ,28, and 29 are allowed. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL R. VAUGHAN whose telephone number is 
(571)270-7316. The examiner can normally be reached on Monday - Thursday, 7:30am 
- 5:00pm, EST. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, William Korzuch can be reached on 571-272-7589. The fax 
phone number for the organization where this application or proceeding is assigned is 
571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/M. R. V./ 

Examiner, Art Unit 2431 



/William R. Korzuch/ 

Supervisory Patent Examiner, Art Unit 2431 



